fix: update SignPath artifact config with authenticode-sign directives

Author: OlaProeis

.signpath/artifact-configuration.xml

@@ -7,20 +7,21 @@
   
   Signed artifacts:
   - ferrite-portable-windows-x64.zip: Contains ferrite.exe (portable build)
-  - ferrite-windows-x64.msi: MSI installer with embedded ferrite.exe
+  - ferrite-windows-x64.msi: MSI installer (signs MSI and embedded exe automatically)
 -->
 <artifact-configuration xmlns="http://signpath.io/artifact-configuration/v1">
   <!-- GitHub Actions wraps uploaded artifacts in a zip -->
   <zip-file>
     <!-- Windows portable zip - sign the executable inside -->
     <zip-file path="ferrite-portable-windows-x64.zip">
-      <pe-file path="ferrite.exe" />
+      <pe-file path="ferrite.exe">
+        <authenticode-sign />
+      </pe-file>
     </zip-file>
 
-    <!-- Windows MSI installer - sign both the MSI and the executable inside -->
+    <!-- Windows MSI installer - signing MSI also signs embedded executables -->
     <msi-file path="ferrite-windows-x64.msi">
-      <!-- Sign the main application executable -->
-      <pe-file path="ferrite.exe" />
+      <authenticode-sign />
     </msi-file>
   </zip-file>
 </artifact-configuration>